Limping along site of MyDarkWeb.com
2015-04-28: The People Who Risk Jail to Maintain the Tor Network
2015-04-28: Drug dealer: Cops leaned me over 18th floor balcony to get my password
2015-04-28: The Further Democratization of Stingray
2015-04-25: Tor-Based Dark Web Email Service Targeted by Government Spies
2015-04-25: After Hacks, A Dark Web Email Provider Says a Government Spied on its Users
2015-04-25: Op-Ed: In defense of Tor routers
2015-04-24: Google and Facebook Execs Question Government Desire for Encryption Backdoors
2015-04-24: House passes bill allowing corporations to share your data [reddit discussion]
2015-04-24: How to Detect Sneaky NSA `Quantum Insert' Attacks
2015-04-19: Congress cannot be taken seriously on cybersecurity [reddit discussion]
2015-04-19: FBI can't cut Internet and pose as cable guy to search property, judge says [reddit discussion]
2015-04-17: France wants to fight terrorism by spying on everyone
2015-04-17: The DEA Has Been Secretly Buying Hacking Tools From an Italian Company
2015-04-17: An alarming new way to steal your passwords [reddit discussion]
2015-04-17: Whistleblowers' Lawyer Finds Malware On Hard Disk Planted By Police [reddit discussion]
2015-04-17: A Few Thoughts on Cryptographic Engineering
2015-04-17: Facebook Partners With Shadowy `Data Brokers' To Farm Your Information
2015-04-13: NSA: 'Back doors are a bad idea, give us a FRONT door key'
2015-04-13: Anyone Can Buy the Malware Used to Hack Sony
2015-04-13: NY Cops Used `Stingray' Spy Tool 46 Times Without Warrant [reddit discussion]
2015-04-13: Facebook claims `a bug' made it track nonusers [reddit discussion]
2015-04-12: NSA dreams of smartphones with "split" crypto keys protecting user data [reddit discussion]
2015-04-11: The government hides surveillance programs just because people would freak out
2015-04-10: NSA wants "legal" backdoors [reddit discussion]
2015-04-09: Can They See My Dick? [reddit discussion]
2015-04-13: Unleashed Kickstarter
2015-??-??: Started design/development in distant past
Starting on front-end Public Directory searching and adding Public-IDs (i.e., "connecting") to local database.
Figured out how to roll out some AWS hosts. Then I set up command-line control. Booyah. Simulated 40 years of AWS experience, that some idiot employers demand, in two hours.
User may now edit profile for an identity and publish it to the Public Directory.
Starting cycle for front-end (the SPAS website) Identity management -- publishing, profile editing, etc.
A "wizard"-like startup sequence for first time (simplified) setup of a Keyring and an Identity/Profile.
Cranking out this webpage.
Completed a re-engineering cycle on backend to enable adhoc publishing of profile information to the Public Directory. This capability is presently text only. Publically publishing personal information allows people to discover you in the system via search of the profiles.
A public profile is optional. If you do not have a public profile, then connecting with others needs to occur via another method.
A bunch of stuff happened.
Diagram!
|----------------------------------------------|
| Browser (Firefox, Chrome, IE) |
|----------------------------------------------|
\|||/
|||
Local Network (lo)
|||
/|||\
|----------------------------------------------|
|SPAS (Secured Personal Application Server) |
| |
| <app> <app> <app> .... |
| |
|--------------|-------------------------------|
| | |
| | Secure (Keyring, Crypto) |
| | |
| |-------------------------------|
| Client |
| |
|----------------------------------------------|
\|||/
|||
Internet Connection / TOR
|||
/|||\
|--------------------|-------------------------|
| Public Directory | Anonymous Interchange |
|--------------------|-------------------------|
Explanation of terms used in the system. Attempts are made to be comprehensible to the layperson - otherwise, techo-babblery.
Anonymous Interchange: A low-level public service where messages are posted to Target IDs. Users' Keyrings will have the Target IDs they are interested in. Messages are automatically purged after a time period.
Channel: A low-level message on the Anonymous Interchange. The Target ID of a channel is random. Typically, a one or more users will have been given the encryption key to the Channel payload.
Deprecating an Identity: A user decides that one of their Identities should not be used anymore. Problem: maybe a buch of people have that Identity's Public-ID on their system. So their systems need to be able to find out that the Public-ID is to no longer be used. If the Identity is published, the Public Directory entry can be flagged as deprecated.
Identity: A means of being you (i.e., an asymmetric key). Cryptographic primitives protect against others from claiming to be you (in the system). You can have multiple identities. Identities can be private or published.
Public Directory: A Public-Key Server. A public service for searching for people and connecting to them. Users control what information, if any, is published about them.
Public-ID: Used to refer to a user's Identity without actually having that Identity (i.e., the Public-Key). The Public-ID is given to other users - this creates a connection between users. Each Identity comes with a Public-ID, to be given out to others as desired.
Published Identity: An Identity whose profile information is published on the Public Directory.
SPAS: (Secured Personal Application Server) A web server that runs locally on the users PC. The idea is that the system is installed once on the PC and does not change during use. Contrasted with classic webpages wherein you may be receiving different code every new page. The user points their browser at the SPAS for all MyDarkWeb operations.
Target ID: The send-to identifier for a post on the Anonymous Interchange. The value will either be a Public-ID or a randomized value representing a Channel.